WordPress Plugin CVE Database

High

CVE-2026-7330

Auto Affiliate Links [wp-auto-affiliate-links] < 6.8.8.1

High

CVE-2026-7252

WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance [wp-optimize] < 4.5.3

High

CVE-2026-6692

Slider Revolution [revslider] < 7.0.11

Medium

CVE-2026-4807

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin [simply-schedule-appointments] < 1.6.11

High

CVE-2026-42653

Affiliate Program Suite — SliceWP Affiliates [slicewp] < 1.2.7

Medium

CVE-2026-6214

Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.53.0.1

Medium

CVE-2026-6222

Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.52

Medium

CVE-2026-6344

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder [fluentform] < 6.2.2

High

CVE-2026-7332

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.5.1

CVE

CVE-2026-7448

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.5.1

Medium

CVE-2026-7457

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.5.1

Medium

CVE-2026-6672

Affiliate Program Suite — SliceWP Affiliates [slicewp] < 1.2.8

Medium

CVE-2026-4362

ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor [elementskit-lite] < 3.9.0

High

CVE-2026-25863

Conditional Fields for Contact Form 7 [cf7-conditional-fields] <= 2.6.7 (unfixed)

Medium

CVE-2026-1921

Loco Translate [loco-translate] < 2.8.3

High

CVE-2026-5192

Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.52.2

Medium

CVE-2026-2729

Forminator Forms – Contact Form, Payment Form & Custom Form Builder [forminator] < 1.52.1

Medium

CVE-2026-42663

Simple Membership [simple-membership] < 4.7.3

Medium

CVE-2026-4790

Premium Addons for Elementor – Powerful Elementor Templates & Widgets [premium-addons-for-elementor] < 4.11.71

High

CVE-2026-2052

Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets [widget-options] < 4.2.3

High

CVE-2026-7641

Import and export users and customers [import-users-from-csv-with-meta] < 2.0.9

Medium

CVE-2026-6449

Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 2.3

Medium

CVE-2026-4658

Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 6.1.0

High

CVE-2026-5111

Gravity Forms [gravityforms] < 2.10.1

High

CVE-2026-5110

Gravity Forms [gravityforms] < 2.10.1

High

CVE-2026-5113

Gravity Forms [gravityforms] < 2.10.1

High

CVE-2026-5112

Gravity Forms [gravityforms] < 2.10.1

High

CVE-2026-5109

Gravity Forms [gravityforms] < 2.10.1

Medium

CVE-2026-6916

Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress [jeg-elementor-kit] < 3.1.1

Medium

CVE-2026-6127

Elementor Website Builder – more than just a page builder [elementor] < 4.0.5

Medium

CVE-2024-13362

Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App [post-smtp] < 3.1.0

Critical

CVE-2026-42774

JetEngine [jet-engine] < 3.8.8.2

High

CVE-2026-40776

Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) [wp-event-solution] < 4.1.9

Medium

CVE-2026-4019

Complianz – GDPR/CCPA Cookie Consent [complianz-gdpr] < 7.4.6

Medium

CVE-2026-40795

Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 2.2.1

High

CVE-2026-6741

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.4.2

High

CVE-2026-42384

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin [simply-schedule-appointments] < 1.6.11.2

Medium

CVE-2025-11762

HubSpot All-In-One Marketing – Forms, Popups, Live Chat [leadin] < 11.3.33

High

CVE-2026-40789

Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 2.2.1

Medium

CVE-2026-25440

Essential Addons for Elementor – Popular Elementor Templates & Widgets [essential-addons-for-elementor-lite] < 6.6.0

Medium

CVE-2026-3361

WP Store Locator [wp-store-locator] < 2.3.0

High

CVE-2026-40775

Royal MCP – Secure AI Connector for Claude, ChatGPT & Gemini [royal-mcp] < 1.4.3

Medium

CVE-2026-40773

rtMedia for WordPress, BuddyPress and bbPress [buddypress-media] < 4.7.10

High

CVE-2026-39467

Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider [ml-slider] < 3.107.0

Critical

CVE-2026-39465

Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider [ml-slider] < 3.107.0

High

CVE-2026-39503

Easy Digital Downloads – eCommerce Payments and Subscriptions made easy [easy-digital-downloads] < 3.6.6

Medium

CVE-2026-39489

Download Monitor [download-monitor] < 5.1.10

Medium

CVE-2026-5721

wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin [wpdatatables] < 6.5.0.5

High

CVE-2026-39472

PDF Invoices & Packing Slips for WooCommerce [woocommerce-pdf-invoices-packing-slips] < 5.9.0

High

CVE-2026-6518

CMP – Coming Soon & Maintenance Plugin by NiteoThemes [cmp-coming-soon-maintenance] < 4.1.17

Medium

CVE-2026-2986

Contextual Related Posts [contextual-related-posts] < 4.2.2

Medium

CVE-2026-4160

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder [fluentform] < 6.2.0

High

CVE-2026-5231

WP Statistics – Simple, privacy-friendly Google Analytics alternative [wp-statistics] < 14.16.5

Medium

CVE-2026-3488

WP Statistics – Simple, privacy-friendly Google Analytics alternative [wp-statistics] < 14.16.5

Medium

CVE-2026-5234

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.4.0

CVE

CVE-2026-40308

My Calendar – Accessible Event Manager [my-calendar] < 3.7.7

Medium

CVE-2025-13364

WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters [wp-google-map-plugin] < 4.8.8

Medium

CVE-2026-3885

Shortcodes Ultimate – Content Elements [shortcodes-ultimate] < 7.5.0

Medium

CVE-2026-39468

Meta Box [meta-box] < 5.11.2

High

CVE-2026-39463

ManageWP Worker [worker] < 4.9.32